X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:content-type:mime-version:subject:from
	:in-reply-to:date:content-transfer-encoding:message-id
	:references:to; q=dns; s=default; b=FAh6nmPK0FvErXSWnEAdMk/CsB3x
	O6d5T0njq11UJnNkxkU/PoEGpdbEslB1zoEs4V80y0P6UTf0MW5fQ1kp+RB3HZOX
	syf+teoobDczow+gq1NOSiM9P30ODa876meozXpykpp7QVIZgutYvXBG9Za/d/nE
	xImFfkO3vEW0X14=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:content-type:mime-version:subject:from
	:in-reply-to:date:content-transfer-encoding:message-id
	:references:to; s=default; bh=2nYdWi5zzj8Bn9/U30tBDjHOiTo=; b=fO
	O0moKqc1z/HGyf0zDxtBjqfDKzjvClWsulnvXArHPaGogD5R+psXfS7OUID8ESob
	39EYRx06238MkWSVpzYxcRF2yAfcEur2bsIHj1wE4rtA+i87hz0ZVlap0ishkVPN
	t12W81wMMqFiQkXT4BgW7llyhDgA+kJiaHNuuYKns=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=1.5 required=5.0 tests=AWL,BAYES_50,KAM_LAZY_DOMAIN_SECURITY,RP_MATCHES_RCVD autolearn=ham version=3.3.2 spammy=jariaaltocantenet, sk:jari.aa, D*cante.net, jari DOT aalto AT cante DOT net
X-HELO: etr-usa.com
Content-Type: text/plain; charset=us-ascii
Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\))
Subject: Re: Security update needed for mercurial (upload error: doesn't follow naming convention)
From: Warren Young <wyml AT etr-usa DOT com>
In-Reply-To: <20160420165640.GB9640@piccolo>
Date: Wed, 20 Apr 2016 12:07:42 -0600
Message-Id: <4A2427F3-55E4-46B3-8111-EF085741290A@etr-usa.com>
References: <86h9fjdhkf DOT fsf AT gmail DOT com> <vz137qhlfxy DOT fsf AT gmail DOT com> <20160420085938 DOT GA16548 AT calimero DOT vinschen DOT de> <20160420165640 DOT GB9640 AT piccolo>
To: The Cygwin Mailing List <cygwin AT cygwin DOT com>
X-IsSubscribed: yes
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from quoted-printable to 8bit by delorie.com id u3KI84GD010927

On Apr 20, 2016, at 10:56 AM, Jari Aalto <jari DOT aalto AT cante DOT net> wrote:
> 
>> 3.7.3 as a security release, with fixes for:
>> 
>> CVE-2016-3630 Mercurial: remote code execution in binary delta decoding
>> CVE-2016-3068 Mercurial: arbitrary code execution with Git subrepos
>> CVE-2016-3069 Mercurial: arbitrary code execution when converting Git repos
> 
> New release uploaded, but I got this message (x64)?
> 
> ERROR: tar file 'mercurial-3.7.3.tar.gz' in package 'mercurial' doesn't follow naming convention
> ERROR: error while reading uploaded packages for Jari Aalto

I take from that that you are not using cygport for that package?  This sort of detail is one of the things that cygport takes care of for you.
--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple